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Abstract not available for EP1 047992 
Abstract of corresponding document: W09936854 
A system and method for controlling the usage of 
data objects in component object systems. 
According to the invention, each data object 
(112) includes a peer list that defines one or 
more peer data objects (118) that are required by 
the data object (1 1 2). Upon receipt of a data 
object (1 1 2), the system verifies the integrity of 
the data object (112). Further, the system 
identifies the integrity of the peer data objects 
(118). If the system cannot find the peer data 
objects (118), or the system cannot authenticate 
the peer data objects (118), the system may 
optionally retrieve a peer data object that can be 
authenticated from a data object depository. In 
addition to validating the integrity of the data 
object (112), the system verifies that the data 
object (112) is authorized to communicate with 
each of the peer data objects (118). Further, the 
system verifies that the peer data objects (118) 
are authorized to communicate with the data 
object (112). 
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Abstract of EP1 069726 

A password-only mutual network authentication protocol and key exchange protocol using a public key 
encryption scheme in which a server generates a public key / secret key pair and transmits the public key 
to a client. The client determines whether the public key was chosen in an acceptable manner, and if so, 
continues with the protocol. Otherwise, the client rejects authentication. If the protocol is continued, in one 
embodiment the client generates a parameter p as a function of the public key and a password (or, in an 
alternate embodiment, as a function of the public key and a function of a password). If the public key 
space mapping function FPK applied to p, FPK(p), is an element of the public key message space, then 
the protocol continues. If FPK(p) is not an element of the public key message space, then the client 
determines to reject authentication, but continues with the protocol so that the server does not gain any 
information about the password. If the client determines to reject authentication, it will terminate the 
protocol at a later step at which time the termination of the protocol cannot leak any sensitive information. 
If both the client and the server accept authentication, then session keys are generated for subsequent 
secure communication between the client and server. Specific embodiments are disclosed in which RSA 
is used as the public key encryption scheme. 
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